Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/167f31e6-4c15-3483-92ee-601475dac79d.roa
File:                     167f31e6-4c15-3483-92ee-601475dac79d.roa (raw, json)
Hash identifier:          AJDKqu7/f2ureG05Ao7mjEdHXzutVYxcWNjvTYlrbkk=
Subject key identifier:   63:8F:F9:63:52:67:41:33:E5:64:4E:09:63:B5:A2:89:D5:96:2F:28
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201D63CC57CBFA0B4BD0080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/167f31e6-4c15-3483-92ee-601475dac79d.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.18.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:d6:3c:c5:7c:bf:a0:b4:bd:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=05eb2995-1809-4442-bb02-21bc39ddd164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:21:c7:fc:61:0c:48:8d:69:0d:75:f9:75:
                    e1:05:c1:60:89:bc:a7:bf:53:0b:27:db:23:a3:bd:
                    27:a4:bf:0c:6e:1a:dc:4a:b3:fe:3a:59:21:69:1d:
                    14:4c:de:89:b0:1f:3a:f9:ab:31:78:51:dc:76:54:
                    95:4a:ff:99:0b:f0:29:9b:2b:93:5b:cc:7d:b3:28:
                    98:ee:44:0a:7e:5a:18:dd:a8:9a:76:8a:a6:ff:a1:
                    6d:38:f7:06:f9:7d:c5:fc:60:79:8c:db:ce:cb:dc:
                    a4:23:d4:4d:1f:00:d3:99:72:3d:4f:3d:12:1e:4b:
                    72:44:50:21:e1:3a:d7:d2:72:7c:e5:30:6b:3e:f5:
                    d7:85:8c:e3:ee:61:eb:9d:38:07:ec:46:e0:8e:31:
                    34:f8:e6:db:0b:fb:f9:6a:ab:35:33:29:89:e5:90:
                    5f:8f:b6:0c:f4:7c:92:bf:2f:73:91:54:cd:9b:77:
                    1e:02:b2:e9:bc:d1:92:01:5f:ed:bc:fd:f9:69:9b:
                    2e:23:db:9c:15:eb:3f:87:37:fc:47:64:11:a1:35:
                    a2:05:61:24:4c:92:85:fc:31:b9:62:e1:6a:b1:ef:
                    da:92:98:f7:7b:d5:70:3e:80:a4:8d:40:39:65:b0:
                    62:c9:6e:a1:aa:5e:9d:6c:c6:a8:b9:3d:7a:91:ca:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8F:F9:63:52:67:41:33:E5:64:4E:09:63:B5:A2:89:D5:96:2F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/167f31e6-4c15-3483-92ee-601475dac79d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f1:88:c1:e6:3e:62:ef:ef:1b:a2:23:21:67:55:a2:66:64:
         6b:b9:89:ea:a5:32:d1:08:af:88:a8:9b:18:56:e9:88:6a:4c:
         0f:31:d4:ce:b0:c1:43:91:8d:5d:4e:d8:b4:2d:be:ac:33:bd:
         4e:a6:34:ab:61:86:5f:6f:5a:f6:41:a8:b0:8e:20:10:58:b1:
         52:63:1a:37:22:26:4c:32:10:2f:a6:68:df:01:90:d6:94:29:
         e0:f9:1e:40:60:76:98:28:64:26:78:a8:24:1a:4e:c5:cc:f4:
         2b:74:56:e2:62:6e:75:be:d0:fe:53:e2:ef:80:29:b3:0a:cb:
         80:3e:d6:df:da:1f:6d:48:5f:22:a9:df:8f:6c:79:8f:5a:eb:
         49:cb:f0:1f:a7:dd:6e:d4:3e:fe:8d:9a:e7:02:45:b9:b7:56:
         11:1b:58:3f:70:1f:9c:3e:d2:44:d9:ff:4e:80:d9:cc:57:52:
         51:6d:d7:91:26:8a:56:34:41:89:bf:61:ea:36:19:a5:55:ea:
         61:28:9a:33:3f:e6:9b:70:13:63:ab:fa:63:11:40:6f:57:74:
         b6:61:8a:a7:35:76:3b:cc:45:d7:91:f5:b4:19:78:b3:54:40:
         4f:ca:65:18:01:e1:2c:1e:f4:5f:e0:22:98:ab:73:7b:3d:a3:
         80:dc:28:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdY8xXy/oLS9AIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
MDVlYjI5OTUtMTgwOS00NDQyLWJiMDItMjFiYzM5ZGRkMTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo4hx/xhDEiNaQ11+XXhBcFgibynv1MLJ9sj
o70npL8MbhrcSrP+OlkhaR0UTN6JsB86+asxeFHcdlSVSv+ZC/ApmyuTW8x9syiY
7kQKfloY3aiadoqm/6FtOPcG+X3F/GB5jNvOy9ykI9RNHwDTmXI9Tz0SHktyRFAh
4TrX0nJ85TBrPvXXhYzj7mHrnTgH7EbgjjE0+ObbC/v5aqs1MymJ5ZBfj7YM9HyS
vy9zkVTNm3ceArLpvNGSAV/tvP35aZsuI9ucFes/hzf8R2QRoTWiBWEkTJKF/DG5
YuFqse/akpj3e9VwPoCkjUA5ZbBiyW6hql6dbMaouT16kcoHZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOP+WNSZ0Ez5WROCWO1oonVli8oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTY3ZjMxZTYtNGMxNS0z
NDgzLTkyZWUtNjAxNDc1ZGFjNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRJUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHxiMHmPmLv7xuiIyFnVaJmZGu5ieqlMtEIr4iomxhW6YhqTA8x1M6w
wUORjV1O2LQtvqwzvU6mNKthhl9vWvZBqLCOIBBYsVJjGjciJkwyEC+maN8BkNaU
KeD5HkBgdpgoZCZ4qCQaTsXM9Ct0VuJibnW+0P5T4u+AKbMKy4A+1t/aH21IXyKp
349seY9a60nL8B+n3W7UPv6NmucCRbm3VhEbWD9wH5w+0kTZ/06A2cxXUlFt15Em
ilY0QYm/Yeo2GaVV6mEomjM/5ptwE2Or+mMRQG9XdLZhiqc1djvMRdeR9bQZeLNU
QE/KZRgB4Swe9F/gIpirc3s9o4DcKNA=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:38 2025 by rpki-client